
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier: vYHMKu+UhNpJKwoK8EIY3aOFP98pYD23T3nnynlMP+g=
Subject key identifier: 44:09:DF:D2:47:9F:F6:FA:D9:99:D6:7E:3B:51:8A:04:09:4B:F6:91
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019FA906F08B0168C2B934561328B197F6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number: 0D2D
Signing time: Tue 28 Jul 2026 14:00:31 +0000
Manifest this update: Tue 28 Jul 2026 14:00:31 +0000
Manifest next update: Wed 29 Jul 2026 14:00:31 +0000
Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: WQ2upa7tA8o8GGpft7l4jyvOGN5p8VCd1nc/qxPqRfc=)
15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:f0:8b:01:68:c2:b9:34:56:13:28:b1:97:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jul 28 14:00:31 2026 GMT
Not After : Jul 29 14:00:31 2026 GMT
Subject: CN=4409dfd2479ff6fad999d67e3b518a04094bf691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:df:0c:20:9f:ca:65:10:73:58:9c:80:ea:
b8:63:49:f0:35:e2:58:61:cb:b1:3a:e6:6e:ee:97:
2a:94:b1:8d:6d:dd:9c:00:92:78:ec:4f:f3:ed:4e:
0f:2c:fb:d5:b4:5a:84:07:b5:ca:0a:fa:76:80:3a:
f4:8f:0b:2e:6b:0b:d9:ce:43:84:0c:0a:f6:03:58:
d5:c5:16:50:dc:10:c8:03:24:46:d8:ae:39:70:32:
cf:25:cd:96:32:92:7d:98:33:41:22:96:90:8d:49:
1d:af:00:0c:b0:bd:54:73:e2:25:80:64:2a:c8:4f:
fa:e8:9a:db:f6:0c:a0:3d:84:45:6a:78:7b:b9:8f:
ec:71:de:a7:1c:93:e8:af:6a:0f:4c:6c:e2:32:4f:
16:6e:7a:3c:48:54:61:ff:35:b4:3b:d9:79:41:10:
cd:21:53:37:4c:9b:e1:fc:1a:5d:93:a8:cd:c5:5e:
83:c5:c9:fc:6d:bd:12:2a:8b:95:25:ba:7e:5b:a1:
e0:7d:c8:6c:19:a3:4b:a6:fc:86:c6:15:02:24:89:
a7:00:48:7d:ca:a5:51:a4:0f:76:17:ae:df:22:98:
ac:d2:80:82:6c:63:07:cd:bc:9a:0d:5c:25:b6:f8:
23:0d:4b:1e:96:ed:17:4b:ac:a1:e0:e7:3b:b4:d5:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:DF:D2:47:9F:F6:FA:D9:99:D6:7E:3B:51:8A:04:09:4B:F6:91
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:7d:ea:2e:b5:13:95:db:20:9f:65:80:ea:38:8d:c4:c7:97:
e0:d4:ac:14:16:17:6c:b0:f1:83:58:f0:3f:02:28:e1:fa:61:
c8:67:d6:07:41:95:a5:68:19:8a:a1:96:1b:f8:90:8d:6d:54:
16:e0:56:be:27:06:f8:2f:46:74:a2:e7:02:eb:04:ff:71:9d:
25:32:06:53:f6:4c:6d:4f:ee:46:d1:17:8c:bc:f7:f7:fc:b4:
ea:04:8d:54:c3:df:fd:d1:4d:f4:3f:00:b5:83:3b:31:4e:db:
d9:01:40:72:d7:9b:7a:33:da:23:4e:0b:55:33:e6:62:45:38:
2d:77:7b:03:27:28:7e:2b:7f:7e:e9:cf:eb:f1:f0:f0:68:d6:
ff:86:ae:6e:f4:1f:1d:87:fb:f7:ce:cc:ab:cc:63:b6:6d:b0:
d1:4e:99:0a:71:7d:67:cb:24:c9:08:f6:c9:7a:55:c9:5f:20:
2b:bb:5c:36:a2:c0:01:bc:a7:7c:c3:86:3e:f7:c7:9c:23:69:
4a:dd:bd:b8:36:43:fd:41:54:bc:99:30:19:a8:1b:11:f5:9b:
2c:ea:8d:b4:3a:4b:58:f6:e0:93:34:8b:bf:11:e9:23:6a:88:
aa:79:f0:dc:cc:5e:39:dd:4e:21:87:20:a4:cc:85:69:34:e8:
ac:8c:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:45 2026 by rpki-client